Traefik & HashiCorp: Simplify Cloud-Native Infrastructure

“We adopted Traefik to build a new container platform on Nomad. Its seamless integration with Consul made it easy to implement, and it’s so reliable that we rarely have to think about it. Traefik's API Gateway enabled us to secure our APIs quickly, saving time and allowing our teams to focus on development.”

Tom Davies, Principal Software Engineer, BT Group

Why choose Traefik and HashiCorp?

Experience automation, security, and scalability like never before.

Integrating Traefik's API Gateway with HashiCorp Nomad, Consul, and Vault, brings a comprehensive and powerful solution for managing cloud native and microservices architectures.

Explore the joint workload modernization integration guide with Traefik, Nomad, Consul and Vault

Download Guide

Dynamic Load Balancing and Scaling

Nomad integration with Traefik

Nomad is a simple and flexible scheduler and orchestrator for managing containers and non-containerized applications across on-prem and clouds at scale.

Traefik’s API Gateway seamlessly integrates with Nomad to achieve automated service discovery, dynamic traffic routing, advanced traffic management, and scalable infrastructure management.

Automated Service Discovery

Traefik auto-discovers Nomad services, eliminating manual configurations and allowing dynamic routing updates.

Reliable Traffic Management

Traefik and Nomad enable dynamic, real-time traffic routing and load balancing, supporting modern protocols and advanced traffic management.

Efficient Scaling

Traefik with Nomad boosts infrastructure scalability, resilience, and fault tolerance by ensuring efficient traffic management and seamless service scaling.

Automated Service Discovery and Routing

Consul integration with Traefik

Consul is a service networking solution to automate network configurations, discover services, and enable secure connectivity across any cloud or runtime.

Traefik’s API Gateway can be configured to use Consul for service discovery. Consul automatically registers services and their health statuses. Traefik queries Consul for available services and updates its routing configuration dynamically based on the information provided by Consul.

Easy Configuration

Consul automatically registers services and updates their health statuses, enabling Traefik to dynamically route traffic without manual intervention.

Automatic Updates

Experience automatic updates seamlessly as Traefik adjusts to changes in your cluster, ensuring zero downtime and continuous operation.

Seamless & Secure Traffic Routing

Consul and Traefik ensure efficient, secure traffic routing and seamless connectivity across cloud or runtime environments, protecting data and services robustly.

Zero-Trust Enterprise-Grade Security

Vault integration with Traefik

Vault is an identity-based secrets and encryption management system that provides encryption services that are gated by authentication and authorization methods to ensure secure, auditable and restricted access to secrets.

It integrates with Traefik’s API Gateway to securely manage and store sensitive secrets such as SSL/TLS certificates, API keys, and credentials, enhancing your infrastructure’s security posture.

Dynamic Secrets Management

Secure service-to-service communication with Vault's robust secrets management and encryption capabilities, complementing Traefik's advanced routing and SSL/TLS management.

Automated Certificate Management

Traefik and Vault automate certificate issuance and renewal, reducing the operational burden and ensuring communications are encrypted and secured.

Centralized Access Control

Integrating Vault with Traefik enables centralized authentication, detailed audit logs, and enhanced security monitoring.

“We adopted Traefik OSS to help build a new container platform on HashiCorp Nomad in AWS, following the closure of one of our on-prem datacentres. We needed something that integrated smoothly with Consul and had minimal overhead while handling spikes in demand during major events. Traefik's seamless integration with Consul made it easy to implement, and it’s been so reliable that we rarely have to think about it.

As our platform grew, we needed to support more use cases around security and wanted operational support, which led us to adopt Traefik Hub. Being able to secure our APIs quickly by adding a few Consul tags has been a huge time-saver—our teams can focus on development without worrying about complex configuration.”

⎯ Tom Davies, Principal Software Engineer, BT Group

Traefik & HashiCorp Integration Architecture

1. Deploy with Nomad

Utilize HashiCorp Nomad to deploy applications across any infrastructure, ensuring optimal resource utilization and scalability.

2. Discover with Consul

Consul automatically registers services and monitors their health, providing Traefik with real-time service discovery and configuration updates.

3. Secure with Vault

Vault secures, stores, and tightly controls access to secrets and encryption keys critical for your application security.

Integrate Vault seamlessly with Traefik for enhanced authentication and encryption within your Nomad-managed environment.

4. Expose and Route with Traefik

Traefik acts as your dynamic API Gateway, directing traffic securely and efficiently to your applications based on dynamic routing rules.

Traefik & HashiCorp Use Cases

HashiCorp Vault

Vault & Traefik Configuration Discovery

Traefik’s API Gateway supports Vault as a key-value store for certificate management.

Vault & Traefik Certificate Resolver

Traefik’s API Gateway can use Vault as a certificate resolver, allowing it to dynamically generate certificates on the fly.

HCP Vault & Traefik Certificate Resolver

Traefik’s API Gateway can use HashiCorp Cloud Platform (HCP) Vault as a certificate resolver, allowing it to dynamically generate certificates on the fly.

HCP Vault & Traefik Vault Provider

The Vault provider allows Traefik Hub API Gateway to use TLS certificates stored in HashiCorp Cloud Platform (HCP) Vault using the KV Secrets Engine v2.

HashiCorp Consul

Consul and Consul Catalog as configuration providers for Traefik

Traefik supports a namespace filter in our Consul KV and Consul Catalog integrations which allows users to target specific namespaces when running Consul Enterprise.

Traefik Proxy support for Consul Enterprise and HCP Consul

Traefik adds the first round of support for Consul Enterprise and the HashiCorp Cloud Platform (HCP). This includes an experimental implementation of the namespace feature for the Consul K/V and Consul Catalog providers. This feature allows you to specify a target namespace other than the default namespace when connecting to Consul.